CVE-2026-11974

The CVE-2026-11974 entry concerns the wp-media-folder-addon WordPress plugin up to version 4.1.6. The vulnerability arises because a user-supplied parameter is not validated before being used in a file read operation within two unauthenticated AJAX actions, enabling Arbitrary File Disclosure and ...